1
================
2
WebKitGTK+ 1.2.7
3
================
4
5
What's new in WebKitGTK+ 1.2.7?
6
7
  - Fixes a regression caused by earlier fix for CVE-2010-1791. This
8
    caused webkitgtk to crash on certain sites with javascript.
9
  - Fixes the following CVEs:
10
11
    CVE-2010-4492 CVE-2010-4493 CVE-2011-0482 CVE-2010-4199 CVE-2010-4578
12
13
  Update: CVE-2010-4040 CVE-2011-0778 CVE-2010-2901 CVE-2010-4042  
14
          CVE-2011-0144 CVE-2011-0133 CVE-2011-0115 CVE-2011-0140 
15
          CVE-2011-0149 CVE-2011-1115 CVE-2011-1114 
16
  was also addressed in this release, but failed to be listed at release time.
17
18
================
19
WebKitGTK+ 1.2.6
20
================
21
22
What's new in WebKitGTK+ 1.2.6?
23
24
  - New stable release, API and ABI compatible with previous 1.2.x
25
    versions;
26
  - Fixes crashes with newer libpng (>= 1.4)
27
  - The patches to fix the following CVEs are included with help from
28
    Huzaifa Sidhpurwala <huzaifas@redhat.com> from the Red Hat
29
    security team:
30
31
      CVE-2010-4198 CVE-2010-4197 CVE-2010-4204 CVE-2010-4206
32
      CVE-2010-1791 CVE-2010-3812 CVE-2010-3813
33
34
  Update: CVE-2010-4577  was also addressed in this release, but failed
35
  to be listed at release time.
36
37
================
38
WebKitGTK+ 1.2.5
39
================
40
41
What's new in WebKitGTK+ 1.2.5?
42
43
  - New stable release, API and ABI compatible with previous 1.2.x
44
    versions;
45
  - The patches to fix the following CVEs are included with help from
46
    Vincent Danen and other members of the Red Hat security team:
47
48
      CVE-2010-1780 CVE-2010-3113 CVE-2010-1814 CVE-2010-1812
49
      CVE-2010-1815 CVE-2010-3115 CVE-2010-1807 CVE-2010-3114
50
      CVE-2010-3116 CVE-2010-3257 CVE-2010-3259
51
52
  Update: CVE-2010-3255  was also addressed in this release, but failed
53
  to be listed at release time.
54
55
================
56
WebKitGTK+ 1.2.4
57
================
58
59
What's new in WebKitGTK+ 1.2.4?
60
61
  - New stable release, API and ABI compatible with previous 1.2.x
62
    versions;
63
  - The patches to fix the following CVEs are included with help from
64
    Vincent Danen and other members of the Red Hat security team:
65
66
      CVE-2010-1781 CVE-2010-1782 CVE-2010-1784 CVE-2010-1785
67
      CVE-2010-1786 CVE-2010-1787 CVE-2010-1788 CVE-2010-1790
68
      CVE-2010-1792 CVE-2010-1793 CVE-2010-2648
69
70
  Update: The following were also addressed in this release, but failed
71
  to be listed at release time.
72
73
    CVE-2010-2647 CVE-2010-3119
74
75
================
76
WebKitGTK+ 1.2.3
77
================
78
79
What's new in WebKitGTK+ 1.2.3?
80
81
  - New stable release, API and ABI compatible with previous 1.2.x
82
    versions;
83
  - Includes a fix to build WebKit with ICU 4.4.1
84
  - The patches to fix the following CVEs are included, thanks to the
85
    work done by Michael Gilbert <michael.s.gilbert@gmail.com> for the
86
    Debian security team:
87
88
      CVE-2010-1386 CVE-2010-1392 CVE-2010-1405 CVE-2010-1407
89
      CVE-2010-1416 CVE-2010-1417 CVE-2010-1665 CVE-2010-1418
90
      CVE-2010-1421 CVE-2010-1422 CVE-2010-1501 CVE-2010-1767
91
      CVE-2010-1664 CVE-2010-1758 CVE-2010-1759 CVE-2010-1760
92
      CVE-2010-1761 CVE-2010-1762 CVE-2010-1770 CVE-2010-1771
93
      CVE-2010-1772 CVE-2010-1773 CVE-2010-1774
94
95
   Update: CVE-2010-2264 was also addressed in this release, but
96
   failed to be listed at release time.
97
98
================
99
WebKitGTK+ 1.2.2
100
================
101
102
What's new in WebKitGTK+ 1.2.2?
103
104
  - New stable release, API and ABI compatible with previous 1.2.x
105
    versions;
106
  - A number of crashes discovered since the 1.2.1 release have been
107
    fixed;
108
  - A new function has been added toc clear the back/forward
109
    list:
110
      webkit_web_back_forward_list_clear;
111
  - The infamous "cursor hangs when dragging" bug has been squashed;
112
  - Scrollbars no longer working after going back has also been fixed.
113
114
================
115
WebKitGTK+ 1.2.0
116
================
117
118
What's new in WebKitGTK+ 1.2.0?
119
120
  - New stable branch of WebKitGTK+; API and ABI stable.
121
  - A number of crashes discovered since the 1.1.90 release
122
    have been fixed.
123
  - Building for SPARC has been fixed.
124
  - Building on Itanium in 32 bits mode is now possible.
125
  - Building with newer versions of GTK+ is fixed.
126
  - A few translations got updated.
127
128
=================
129
WebKitGTK+ 1.1.90
130
=================
131
132
What's new in WebKitGTK+ 1.1.90?
133
134
  - Display server side messages during HTTP auth, since they
135
    sometimes contain important information for the authentication
136
    process.
137
  - Reduce creation time for WebKitWebView widgets by reusing
138
    dictionary structs used for spell-checking instead of creating a
139
    new one for each instance.
140
  - Implement WebKitWebView::geolocation-policy-decision-requested,
141
    emitted when a frame inside the WebView wants to get its position
142
    through geolocation.
143
  - Add WebKitWebSettings::enable-spatial-navigation to control
144
    whether Spatial Navigation is enabled or not. Spatial Navigation
145
    allows the user to move through the elements in a page using only
146
    the keyboard; this is similar to caret browsing, but with less
147
    focus on accessibility since instead of presenting the exact
148
    layout of the page to the user a more "logical" way of browsing
149
    through its contents is allowed. A specification of this feature
150
    can be seen at
151
    http://www.w3.org/TR/WICD/#current-focus-point-algorithm
152
  - Add a new build option, --enable-fast-mobile-scrolling. At the
153
    moment this only disables fixed backgrounds when there are no
154
    other fixed elements in a page, since they generally make
155
    scrolling very slow and thus are a big burden in some mobile
156
    environments.
157
  - GTK+ Input Method support has received a big overhaul, and most of
158
    them should work pretty well now.
159
  - All known redraw issues in the plugin support (especially with the
160
    Java plugin) have been fixed.
161
  - Various fixes to the MediaPlayer code to improve responsiveness
162
    and avoid lagging on position reporting.
163
  - Lots of bugfixes and other improvements.
164
165
=================
166
WebKitGTK+ 1.1.22
167
=================
168
169
What's new in WebKitGTK+ 1.1.22?
170
171
  - Preliminary support for Java plugins. Basic functionality is
172
    there, but there are still a few rough edges. Also newly
173
    introduced is a new WebKitWebSetting, 'enable-java-applet', which
174
    controls whether WebKit will recognize the non-standard <applet>
175
    tag.
176
  - Add WebKitWebSettings::auto-resize-window; when enabled, WebKit
177
    will act upon the DOM methods that change the size and/or position
178
    of the window containing a WebView (window.{moveTo, resizeTo,
179
    moveBy, resizeBy}).
180
  - Add WebKitWebSettings::enable-file-access-from-file-uris; when
181
    enabled, each file:// URI will be assigned its own security
182
    domain.
183
  - Lots of bugfixes, especially in the PageCache support.
184
185
=================
186
WebKitGTK+ 1.1.21
187
=================
188
189
What's new in WebKitGTK+ 1.1.21?
190
191
  - New custom-made GStreamer source element that uses the WebCore
192
    network layer to download media data; this makes sure any headers
193
    and cookies will automatically get added when making requests.
194
  - WebKit will now let libsoup know who the first party for a given
195
    message is, making it possible to implement accept/deny policies in
196
    Soup.
197
  - The usual stream of fixes, and improvements
198
199
=================
200
WebKitGTK+ 1.1.20
201
=================
202
203
What's new in WebKitGTK+ 1.1.20?
204
205
  - Fixes to the HTML5 Media Player infrastructure to satisfy sites
206
    that require cookies, and Referer to be sent; this makes
207
    WebKitGTK+ able to support the new HTML5 support added to Youtube,
208
    and Vimeo, for instance.
209
  - Windowless plugin support is finally here, making it possible to
210
    get plugins to behave on various web pages.
211
  - The usual stream of fixes, and improvements
212
213
=================
214
WebKitGTK+ 1.1.19
215
=================
216
217
What's new in WebKitGTK+ 1.1.19?
218
219
  - Improvements to AtkText implementation
220
  - RGBA colormap support has been added
221
  - Improvements to the HTML5 media player
222
  - Crashes related to clipboard handling, which were hitting many
223
    users and seemed to be random have been fixed
224
225
=================
226
WebKitGTK+ 1.1.18
227
=================
228
229
What's new in WebKitGTK+ 1.1.18?
230
231
  - Add methods to set and get a cache model in WebKitGTK+. We offer
232
    two possibilites: document viewer (no caches are used) and browser
233
    (similar to the previous defaults).
234
  - Add WebKitWebSettings::enable-page-cache. Controls whether the
235
    Page Cache is enabled or not. For details about what the page
236
    cache is and does see
237
    http://webkit.org/blog/427/webkit-page-cache-i-the-basics/
238
    The page cache is disabled by default, since the gtk+ port still
239
    presents some small bugs when it's enabled.
240
  - Add WebKitWebSettings::enable-site-specific-quirks. Controls
241
    whether a series of page-specific workarounds are used by WebKit.
242
  - Use Content-Encoding support available in libsoup 2.28.2 and
243
    newer.
244
  - Add WebKitWebSettings::enable-default-context-menu. Controls
245
    whether webkitgtk+ will show a default context menu on right click
246
    in the view. Note that even with the property set to FALSE right
247
    clicks can be handled by the page, either by actions or by
248
    ad-hoc in-page context menus.
249
  - Make the WebKitWebView::icon-loaded signal carry a string with the
250
    favicon's URI. This is an API break, but the signal already had a
251
    broken signature and was useless anyway, so it's extremely
252
    unlikely that anybody was using it. Also, add the 'icon-uri'
253
    property to the view, holding the URI for its current favicon.
254
  - Respect Content-Disposition header in downloads (fixes downloads
255
    in gmail).
256
  - Various accessibility improvements.
257
  - Many bugfixes.
258
259
=================
260
WebKitGTK+ 1.1.17
261
=================
262
263
What's new in WebKitGTK+ 1.1.17?
264
265
  - New APIs to show and close the web inspector and to inspect an
266
    element at the given coordinates.
267
  - New property, WebKitWebSettings::tab-key-cycles-through-elements,
268
    controls whether TAB is simply interpreted as another keystroke or
269
    is used to cycle through the elements in a page.
270
  - Many a11y improvements.
271
  - The usual amount of random bugfixes.
272
273
=================
274
WebKitGTK+ 1.1.16
275
=================
276
277
What's new in WebKitGTK+ 1.1.16?
278
279
  - Add optional support to generate the gobject-introspection
280
    gir/typelib files. Enable with --enable-introspection, it's off by
281
    default.
282
  - Add a new load status value, WEBKIT_LOAD_FAILED, emitted when
283
    there's an error during the load process. This is the natural
284
    companion to WEBKIT_LOAD_FINISHED, which is only emitted when the
285
    load finished succesfuly.
286
  - Ensure that keyboard events filtered by GtkIMContext still create
287
    the proper DOM events.
288
  - Many a11y improvements: caret browsing fixes, expose heading
289
    levels, more accessible roles supported, more work in correctly
290
    showing the element's ancestry list, improved support for lists,
291
    etc.
292
  - Many improvements to our media support.
293
  - Add a new setting to control DOM pastes
294
    (document.execCommand("Paste"))
295
  - Many, many bugfixes all over the place.
296
297
=================
298
WebKitGTK+ 1.1.15
299
=================
300
301
What's new in WebKitGTK+ 1.1.15?
302
303
  - New API to get the subresources from a WebKitWebDataSource. This
304
    provides a way of accessing all the resources that compose the
305
    view to which the data source is attached.
306
  - A new function, webkit_web_view_get_hit_test_result, which allows
307
    to do a 'hit test' on the coordinates specified by a mouse
308
    event. A hit test provides context information about that point in
309
    the document, like whether it's an image, a link, an input box,
310
    etc.
311
  - Our DumpRenderTree implementation now supports eventSender, which
312
    allows us to run many more LayoutTests and make WebKitGTK+ more
313
    stable and feature-complete.
314
  - JSNES runs 6x faster: http://trac.webkit.org/changeset/48573
315
  - The usual small improvements and bugfixes.
316
317
=================
318
WebKitGTK+ 1.1.14
319
=================
320
321
What's new in WebKitGTK+ 1.1.14?
322
323
  - New API has been added to WebKitWebFrame to allow applying
324
    scrollbars policy as requested by web applications to the main
325
    frame; if the parent of the WebKitWebView widget is a
326
    GtkScrolledWindow, policy is applied by the default handler.
327
  - A new API has been added to help dealing with the various
328
    resources that are downloaded to compose the final rendering; you
329
    can now obtain the source code for a page that is loaded, for
330
    instance.
331
  - A new property has been added to WebKitWebView to allow setting it
332
    to "View Source" mode.
333
  - HTML5 database has gained API to manage the individual databases,
334
    including usage and quota.
335
  - A new signal `resource-request-starting' has been added to the
336
    WebKitWebView to allow modification of outgoing requests for every
337
    resource.
338
  - Connection limit has been increased to 60 total connections, 6
339
    per-host, matching other browsers more closely; this seems to have
340
    improved loading time of some sites.
341
  - Undo/redo support has been added to editable texts.
342
  - The usual stream of small improvements and bug fixes.
343
344
=================
345
WebKitGTK+ 1.1.13
346
=================
347
348
What's new in WebKitGTK+ 1.1.13?
349
350
  - GNOME Keyring support was removed in favor of the new Password
351
    Manager soup feature; to get exactly the same behavior,
352
    applications should use SoupPasswordManagerGNOME. This requires
353
    libsoup 2.27.91 or newer.
354
  - Several accessibility improvements, including support for testing
355
    the a11y infrastructure in our layout tests.
356
  - You can now enable/disable HTML5 offline application cache using a
357
    new setting added to WebKitWebSettings.
358
  - Drag support has landed, meaning you can start playing with HTML5
359
    drag and drop support; drop support is still missing.
360
  - A crash with scripts closing windows has been fixed.
361
  - Image cursors support has been added.
362
  - The usual stream of small improvements and bug fixes.
363
364
=================
365
WebKitGTK+ 1.1.12
366
=================
367
368
What's new in WebKitGTK+ 1.1.12?
369
370
  - Fix WebKitSoupAuthDialog to only save passwords in gnome-keyring
371
    (if enabled) when authentication succeeds.
372
  - Implement a proper size_request method for WebKitWebView. The
373
    widget will request the size of the whole page as its size
374
    requisition.
375
  - Many a11y improvements.
376
  - The usual amount of other misc fixes.
377
  - WEBKIT_DEBUG variable now accepts channel names in any case
378
    again.
379
380
=================
381
WebKitGTK+ 1.1.11
382
=================
383
384
What's new in WebKitGTK+ 1.1.11?
385
386
  - WebKit has got a new feature - a XSS auditor, that should improve
387
    security; this feature is still experimental, and disabled by
388
    default, but applications can enable it using the setting.
389
  - The hackish content sniffing code that was beig used to avoid
390
    pages requesting downloads instead of displaying content has been
391
    replaced by usage of a new Soup feature, which implements proper
392
    content sniffing.
393
  - More accessibility work, including fixes for problems which were
394
    critical for a possible GNOME 2.28 release.
395
  - Pasting rich text from other browsers should now work as expected.
396
  - The usual amount of misc fixes.
397
398
=================
399
WebKitGTK+ 1.1.10
400
=================
401
402
What's new in WebKitGTK+ 1.1.10?
403
404
  - WebKitNetworkRequest has now GObject properties for its URI and
405
    the SoupMessage that backs it up.
406
  - Fix AtkText methods get_selection and get_n_selections to not use
407
    the global selection but only the selection that belongs to the
408
    object being used.
409
  - Fix a crasher when emitting the a11y signal 'text-caret-moved' in
410
    some situations with debug builds.
411
412
================
413
WebKitGTK+ 1.1.9
414
================
415
416
What's new in WebKitGTK+ 1.1.9?
417
418
  - Scrolling once again received a lot of love, and many subtle
419
    problems and bugs were killed, and we now get correct behavior in
420
    acid2; a number of smaller improvements are in the queue.
421
  - Accessibility keeps gaining better support. On this release a lot
422
    of work was done on the AtkText interface implementation.
423
  - WebKitNetworkRequest now carries with it all the information
424
    regarding the request, not only the URI. This means you will no
425
    longer miss headers such as Referer when passing NetworkRequest
426
    objects from a callback to webkit_web_frame_load_request.
427
428
================
429
WebKitGTK+ 1.1.8
430
================
431
432
What's new in WebKitGTK+ 1.1.8?
433
434
  - We found out that WebKitWebHistoryItems were being kept with a
435
    reference count of 2 instead of 1 as they should; nobody should be
436
    relying on that, but if you hit reference counting problems with
437
    items you were creating yourself, this is for you.
438
  - You can now copy images from the web page to the clipboard.
439
  - Improvements were made to the Plugin handling code.
440
  - Scroll events will now be correctly reported to web applications.
441
  - You can now embed arbitrary widgets as if it was a plugin, with
442
    the new "create-plugin-widget" signal.
443
  - The atk_text_get_text_{at,after,before}_offset methods are now
444
    implemented for all boundary types except LINE_AFTER and
445
    LINE_BEFORE.
446
  - The usual stream of minor fixes and improvements, as always.
447
448
================
449
WebKitGTK+ 1.1.7
450
================
451
452
What's new in WebKitGTK+ 1.1.7?
453
454
  - This release includes a security fix:
455
    SVGList::insertItemBefore would not perform a bounds check on the
456
    index it was provided, potentially leading to a buffer overflow.
457
  - New frame loading properties supersede various load-* signals, and
458
    are also accessible in the WebView, for convenience, making this
459
    API saner.
460
  - JIT is now supported for X86-64 on Linux, and enabled by default!
461
  - A regression on webkit_web_view_load_string has been fixed, making
462
    it work correctly again when the document uses encodings which may
463
    use more than 1 byte per character.
464
  - Yet more work has been done to the ATK support, caret browsing
465
    support improvements in particular.
466
  - Filenames suggested by the Download functionality now correctly
467
    use the filename given by the host, if available.
468
  - Build fixes for IA64, and AMD64
469
  - gtk-doc support has also improved, and you should now be able to
470
    cd WebKit/gtk/docs and type make docs, if you --enable-gtk-doc on
471
    configure, as long as you build  with srcdir == builddir.
472
  - More crashes and other bugs fixed, and small improvements made
473
    under the hood.
474
475
================
476
WebKitGTK+ 1.1.6
477
================
478
479
What's new in WebKitGTK+ 1.1.6?
480
481
  - Several ATK support additions and fixes got landed, with many
482
    roles being now implemented, providing better accessibility.
483
  - Caret browsing is now available.
484
  - Spelling check has been implemented using Enchant; the API is
485
    still lacking, and some of the functionality still needs to be
486
    improved, though.
487
  - Error reporting is now available, with default error pages, and
488
    API that allows the application to override the default behavior;
489
    localization of those pages is still not supported, but planned.
490
  - More crashes and other bugs fixed.
491
492
================
493
WebKitGTK+ 1.1.5
494
================
495
496
What's new in WebKitGTK+ 1.1.5?
497
498
  - Added gtk-doc support to the build system. It is not fully
499
    integrated yet, so some manual tweaking is still needed.
500
  - Minimum required GTK+ version is now 2.10.
501
  - Added l10n support with gettext. Translations are stored in
502
    WebKit/gtk/po/.
503
  - Many improvements to the ATK support. It's good enough to provide
504
    a basic user experience with Accerciser now, but we'll keep
505
    improving it in further releases.
506
  - New printing API that allows applications to control and monitor
507
    the printing process, when requested by javascript or started by
508
    the user.
509
  - Many bugfixes.
510
511
================
512
WebKitGTK+ 1.1.4
513
================
514
515
What's new in WebKitGTK+ 1.1.4?
516
517
  - WebKitWebView gained uri and title properties, deprecating the
518
    usage of the title-changed signal.
519
  - Basic functionality for HTML5 media tags has been achieved; there
520
    are many unimplented methods, and rough edges still, though.
521
  - Font rendering received quite some love, with layouting, and
522
    memory handling fixes, and at least one less crash.
523
  - A new signal, new-window-policy-decision-requested, has been added
524
    to WebKitWebView, that makes it possible for the application to
525
    correctly decide what to do when new windows are requested.
526
  - A bug that made tooltips for consecutive links not update their
527
    location was fixed.
528
  - Several improvements were made to the HTTP backend, including
529
    making it more robust when talking to servers which send bad
530
    Content-Type headers.
531
  - WebKitWebView now uses the GtkBinding system to handle key events,
532
    which means that the user is now able to customize the keys used
533
    for various operations, and that many subtle bugs have been fixed.
534
535
================
536
WebKitGTK+ 1.1.3
537
================
538
539
The 1.1.3 release was just a quick bug fix release, because we made a
540
mistake in library versioning.
541
542
================
543
WebKitGTK+ 1.1.2
544
================
545
546
What's new in WebKitGTK+ 1.1.2?
547
548
  - Added support for downloads: a new signal, 'download-requested',
549
    will be emitted by WebKit when a dowload is requested. On top of
550
    that, the download process has been encapsulated in a new object,
551
    WebKitDownload, which allows the user to control it or to start
552
    new downloads from the client side.
553
  - Added webkit_web_view_get_encoding to get the automatic encoding
554
    of the current page.
555
  - Added GObject properties for 'encoding' and 'custom-encoding'.
556
  - Added 'javascript-profiling-enabled' property to the WebInspector,
557
    which allows to enable and disable the profiling functionality.
558
  - Added API to create and add history items to WebKit's history.
559
  - Improved debugging support with WEBKIT_DEBUG environment
560
    variable. Most of the settings will only give useful output for
561
    debug builds, but WEBKIT_DEBUG=Network will log all HTTP traffic
562
    form libsoup to console. See WebCore/platform/gtk/LoggingGtk.cpp
563
    for all the options available.
564
  - Lots of bugfixes.
565
566
================
567
WebKitGTK+ 1.1.1
568
================
569
570
What's new in WebKitGTK+ 1.1.1?
571
572
  - ABI compatibility with 1.0.3 was broken, so you will need to
573
    recompile your application against 1.1.1
574
  - Support for the CURL backend was dropped, libsoup is the only HTTP
575
    backend now.
576
  - webkit_get_default_session, to get the SoupSession used internally
577
    by WebKit.
578
  - 'create-web-view' signal, emitted when the creation of a new
579
    window is requested.
580
  - 'navigation-policy-decision-requested' signal, emitted when a
581
    navigation to another page is requested.
582
  - 'mime-type-policy-decision-requested' signal, emitted each time
583
    WebKit is about to show a URI with a given MIME type.
584
  - Support for the Web Inspector
585
    (see http://webkit.org/blog/197/web-inspector-redesign/)
586
  - HTTP authentication support, with optional gnome-keyring storage.
587
  - New load functions: webkit_web_view_open, webkit_web_view_load_uri
588
    and webkit_web_view_load_request. The old
589
    webkit_web_view_load_string and webkit_web_view_load_html_string
590
    are now deprecated.
591
  - webkit_web_view_reload_bypass_cache
592
  - webkit_web_view_{get,set}_custom_encoding, to override the
593
    encoding of the current page.
594
  - Improved stability and lots of bugfixes.